Skip to main content

Cookie Policy

Last updated: July 3, 2026

Overview

This page explains which cookies and similar technologies we use, why, and how you can control them. Replace the placeholder tables below with your final inventory approved by legal counsel before launching to production.

Essential Cookies

Required for the platform to function — authentication sessions, CSRF protection, theme preference, and your consent decision itself. These cannot be switched off.

  • __session — login session (expires per session policy)
  • _csrf — form security token
  • zza_theme — light/dark preference
  • zza_consent — your cookie consent decision (1 year)

Analytics Cookies (consent-based)

Only set after you opt in via the consent banner. Used to understand how the platform is used so we can improve it. You can withdraw consent at any time by clearing the zza_consent cookie — the banner will re-prompt.

Global Privacy Control

We honor the Global Privacy Control (GPC) browser signal. When your browser sends it, analytics and marketing consent are treated as declined regardless of banner choices — as required by California, Texas, Colorado, and other US state laws.

More Information

See our Privacy Policy for how we process personal data, and Sub-processors for the third-party services we rely on.